CVE

Id
37111  
CVE No.
CVE-2008-6994  
Status
Candidate  
Description
Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.149.27 allows user-assisted remote attackers to execute arbitrary code via a web page with a long TITLE element, which triggers the overflow when the user saves the page and a long filename is generated. NOTE: it might be possible to exploit this issue via an HTTP response that includes a long filename in a Content-Disposition header.  
Phase
Assigned (20090817)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
403247 37111 CVE-2008-6994 BUGTRAQ:20080905 Google Chrome 0.2.149.27 "SaveAs" Function Buffer Overflow Vulnerability  View
403248 37111 CVE-2008-6994 URL:http://www.securityfocus.com/archive/1/archive/1/496042/100/0/threaded  View
403249 37111 CVE-2008-6994 MILW0RM:6367  View
403250 37111 CVE-2008-6994 URL:http://www.milw0rm.com/exploits/6367  View
403251 37111 CVE-2008-6994 MILW0RM:6365  View
403252 37111 CVE-2008-6994 URL:http://www.milw0rm.com/exploits/6365  View
403253 37111 CVE-2008-6994 MISC:http://security.bkis.vn/?p=119  View
403254 37111 CVE-2008-6994 MISC:http://www.infoworld.com/d/security-central/critical-vulnerability-patched-in-googles-chrome-599  View
403255 37111 CVE-2008-6994 CONFIRM:http://code.google.com/p/chromium/issues/detail?id=1414  View
403256 37111 CVE-2008-6994 CONFIRM:http://src.chromium.org/viewvc/chrome/branches/chrome_official_branch/src/chrome/common/win_util.cc?r1=1757&r2=1766&pathrev=1766  View
403257 37111 CVE-2008-6994 BID:31029  View
403258 37111 CVE-2008-6994 URL:http://www.securityfocus.com/bid/31029  View
403259 37111 CVE-2008-6994 BID:31031  View
403260 37111 CVE-2008-6994 URL:http://www.securityfocus.com/bid/31031  View
403261 37111 CVE-2008-6994 OSVDB:48259  View
403262 37111 CVE-2008-6994 URL:http://osvdb.org/48259  View
403263 37111 CVE-2008-6994 SECTRACK:1020823  View
403264 37111 CVE-2008-6994 URL:http://securitytracker.com/id?1020823  View
403265 37111 CVE-2008-6994 XF:googlechrome-saveas-bo(44935)  View
403266 37111 CVE-2008-6994 URL:http://xforce.iss.net/xforce/xfdb/44935  View
403267 37111 CVE-2008-6994 XF:google-chrome-filename-dos(44939)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41591 JVNDB-2009-002598 Google Chrome の chrome/common/gfx/url_elider.cc におけるスタックベースのバッファオーバーフローの脆弱性 Google Chrome の chrome/common/gfx/url_elider.cc には、ユーザーがリンク上にマウスポインタを重ねた後、ステータスバーがアップデートされる際、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2008-6998 37111 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002598.html  View